Bambi
Check In Now

Privacy Policy

Last updated: [DATE]

Bambi (“Bambi,” “we,” “us,” “our”) is operated by Havan Enterprise Sdn Bhd (1340422-M). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use bambi.com.my and related services, in accordance with Malaysia’s Personal Data Protection Act 2010 as amended by the Personal Data Protection (Amendment) Act 2024 (“PDPA”).

By using our website or services, you consent to the practices described in this Policy.

1. What We Collect

Depending on how you use Bambi, we may collect:

  • Contact details: name, email address, phone number
  • Assessment responses: your answers to our wellbeing check(s), including any scores or results generated from them
  • Booking information: preferred counsellor, session date/time requested, any notes you provide when booking
  • Payment information: processed via Stripe (we do not store your card details) or, for bank transfer payments, confirmation of payment receipt
  • Communications: any messages you send us via email, WhatsApp, or contact forms
  • Technical data: IP address, browser type, device information, collected automatically when you visit our site

We do not knowingly collect data from anyone under 18. If you are under 18, please do not use this service without a parent or guardian’s involvement.

2. How We Use Your Data

We use your data to:

  • Calculate and show you your wellbeing check results
  • Connect you with a suitable counsellor based on your responses
  • Contact you about your results, including by phone call from our AI Virtual Assistant, where you have given consent
  • Process your booking request and facilitate payment for counselling sessions
  • Send you relevant follow-up communication (only where you’ve consented)
  • Improve our services and understand how our tools are used, using aggregated/anonymised data where possible
  • Meet our legal and regulatory obligations

3. AI Virtual Assistant Calls

If you consent (via the checkbox at the end of a wellbeing check), Wolfline — Bambi’s own in-house AI Virtual Assistant, built and operated by us — will call the phone number you provide to discuss your result with you. This is an automated system, not a human counsellor. Calls are recorded and transcribed and stored within Bambi’s own systems for quality assurance and service improvement. You may decline, end the call, or opt out at any time. We limit outreach to one call per phone number per submission.

If you are experiencing a mental health crisis, having thoughts of self-harm, or need urgent help, please contact emergency services (999 in Malaysia) or a crisis helpline immediately. Do not rely on Bambi’s wellbeing check or AI Virtual Assistant call for emergency support — Wolfline is not equipped to handle emergencies and is not a substitute for professional crisis intervention.

4. Who We Share Your Data With

We do not sell your personal data. We may share your data with:

  • Counsellors you choose to book with — limited to what’s needed for them to prepare for and conduct your session (name, contact details, booking notes)
  • Service providers who help us operate the platform: Firebase/Google Cloud (data storage), Stripe (payment processing), Zoom (video sessions), Resend (email delivery). Note: Wolfline, our AI Virtual Assistant caller, is built and operated in-house by Bambi — call recordings and transcripts stay within our own systems and are not shared with any external vendor.
  • Legal or regulatory authorities, where required by law
  • Anyone else, only with your explicit consent

All service providers are bound to only use your data for the purpose we’ve engaged them for.

5. Data Storage & Security

Your data is stored on Firebase (Google Cloud infrastructure) and may be processed by service providers located outside Malaysia (including Stripe, Zoom, and Wolfline). Where your data is transferred outside Malaysia, we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA. We apply access controls so that your individual quiz responses and booking details are not publicly browsable — only accessible via a private link or by Bambi’s authorised administrators.

5A. Data Breach Notification

In the event of a personal data breach that is likely to result in significant harm to you, we will notify the Personal Data Protection Commissioner and affected individuals in accordance with the PDPA’s data breach notification requirements.

5B. Data Protection Officer

Bambi has appointed a Data Protection Officer responsible for overseeing our compliance with the PDPA. You may contact our DPO using the details in Section 10.

6. How Long We Keep Your Data

We retain your data for as long as necessary to provide our services, comply with legal obligations, or resolve disputes. You may request deletion of your data at any time (see Section 7), subject to any legal retention requirements.

7. Your Rights

Under the PDPA, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or outdated data
  • Withdraw consent for us to process your data (this may limit our ability to provide services to you)
  • Request deletion of your data, where legally permissible
  • Request your data in a portable, commonly-used format, where technically feasible

To exercise any of these rights, contact us at hello@bambi.com.my.

8. Cookies

Our website may use cookies to remember your preferences and understand site usage. You can disable cookies in your browser settings, though this may affect site functionality.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via our website. Continued use of Bambi after changes take effect means you accept the revised Policy.

10. Contact Us

Questions about this Policy or your personal data:

Email: hello@bambi.com.my

Phone: +6012-3688 970

Data Protection Officer: Ivan Eng